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Abstract — The problem of designing physical-layer network 
coding (PNC) schemes via lattice partitions is considered. Build- 
ing on the compute-and-forward (C&F) relaying strategy of 
Nazer and Gastpar, who demonstrated its asymptotic gain using 
information-theoretic tools, an algebraic approach is taken to 
show its potential in practical, non-asymptotic, settings. A gen- 
eral framework is developed for studying lattice-partition-based 
PNC schemes — called lattice network coding (LNC) schemes 
for short — by making a direct connection between C&F and 
module theory. In particular, a generic LNC scheme is presented 
that makes no assumptions on the underlying lattice partition. 
C&F is re-interpreted in this framework, and several generalized 
constructions of LNC schemes are given based on the generic 
LNC scheme. Next, the error performance of LNC schemes is 
analyzed, with a particular focus on hypercube-shaped LNC 
schemes. The error probability of this class of LNC schemes 
is related to certain geometric parameters of the underlying 
lattice partitions, resulting in design criteria both for choosing 
receiver parameters and for optimizing lattice partitions. These 
design criteria lead to explicit algorithms for choosing receiver 
parameters that are closely related to sphere-decoding and 
lattice-reduction algorithms. These design criteria also lead to 
several specific methods for optimizing lattice partitions, and 
examples are provided showing that 3 to 5 dB performance 
improvement over some baseline LNC schemes is easily obtained 
with reasonable decoding complexity. 



I. Introduction 
A. Physical-layer Network Coding 

INTERFERENCE has traditionally been considered harm- 
ful in wireless networks. Simultaneous transmissions are 
usually carefully avoided in order to prevent interference. 
Interference is, however, nothing but a sum of delayed and 
attenuated signals, and so may contain useful information. 
This point of view suggests the use of decoding techniques to 
process — rather than avoid or discard — interference in wireless 
networks. 

So-called physical-layer network coding (PNC) is one such 
technique. PNC is inspired by the principle of network coding 
[T] in which intermediate nodes in the network forward 
functions (typically linear combinations J2], 0) of their 
(already decoded) incoming packets, rather than the packets 
themselves. As the terminology suggests, PNC moves this 
philosophy closer to the channel: rather than attempting to 
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decode simultaneously received packets individually, interme- 
diate nodes infer linear combinations of these packets from the 
received signal, which are then forwarded. With a sufficient 
number of such linear combinations, any destination node in 
the network is able to recover the original message packets. 

The basic idea of PNC appears to have been independently 
proposed by several research groups in 2006: Zhang, Liew, 
and Lam |4), Popovski and Yomo [5], and Nazer and Gastpar 
0. The scheme of [4| assumes a very simple channel model 
for intermediate nodes, in which the received signal y is given 
as y = xi + X2 + z, where xi and X2 are binary-modulated 
signals, z is Gaussian noise, and intermediate nodes attempt 
to decode the modulo-two sum (XOR) of the transmitted 
messages. It is shown that this simple strategy significantly 
improves the throughput of a two-way relay channel. The work 
of 2 ] assumes a more general channel model for intermediate 
nodes, in which y = /iiXi + ft.2X2 + z, where hi and hi 
are (known) complex-valued channel gains, and intermediate 
nodes again attempt to decode the XOR of the ttansmitted 
messages. This channel model captures the effects of fading 
and imperfect phase alignment. It is shown that, in a large 
range of signal-to-noise ratios (SNR), the strategy in O 
outperforms conventional relaying strategies (such as amplify- 
and-forward and decode-and-forward) for a two-way relay 
channel. 

Due to its simplicity and potential to improve network 
throughput, PNC has received much research attention since 
2006. A large number of strategies for PNC have been 
proposed, with a particular focus on two-way relay channels. 
For example, the strategies described in Q, (U are able to 
mitigate phase misalignment for the two-way relay channels. 
This is achieved by generalizing the XOR combination to 
any binary operation that satisfies the so-called exclusive law 
of network coding. The strategies presented in ll9ll- lfTTIl are 
able to approach the capacity of two-way relay channels at 
high SNRs. This is proved by comparing their achievable 
rate regions with the cut-set bound. The amplify-and-forward 
strategy for two-way relay channels has been implemented in 
a test-bed using software radios [12]. A survey of PNC for 
two-way relay channels can be found in lfl3l . 

B. Compute-and-Forward Relaying 

The framework of Nazer and Gastpar [14| moves beyond 
two-way relay channels. It assumes a Gaussian multiple- 
access channel (MAC) model for intermediate nodes, in which 
y = J2e=i hfx-i + z, where hi are (known) complex-valued 
channel gains, and xg are points in a multidimensional lattice. 
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Intermediate nodes exploit the property that any integer com- 
bination of lattice points is again a lattice point. In the simplest 
case, an intermediate node selects integers at and a complex- 
valued scalar a, and then attempts to decode the lattice point 
£^=i fr° m 

L L 

ay = ^2 aeXe + X/( a ^ - a,i)xe + az . 
e=i 1=1 

effective noise 

Here ai and a are carefully chosen so that the "effective 
noise," X^=i( a ^ — a t) yi i + az > is made (in some sense) 
small. The intermediate node then maps the decoded lattice 
point into a linear combination (over some finite field) of the 
corresponding messages. This procedure is referred to as the 
compute-and-forward (C&F) relaying strategy. 

The C&F relaying strategy makes no assumption about 
the network topologies, since the channel model for each 
intermediate node is quite general. The C&F relaying strategy 
tolerates phase misalignment well, since intermediate nodes 
have the freedom to choose ai and a according to the phase 
differences among channel gains h(. To further demonstrate 
the advantages of C&F strategy, Nazer and Gastpar [ 14] have 
established the so-called "computation rate" for a class of one- 
hop networks and have shown that this strategy outperforms 
the outage rate of conventional relaying strategies for such 
simple network topologies. 

The computation rate established in lfl4l is based on the 
existence of an (infinite) sequence of "good" lattice parti- 
tions described in |15|. This sequence of lattice partitions — 
originally constructed by Erez and Zamir to approach the 
capacity of AWGN channels — has also been suggested by 
some other research groups for use in two-way relay channels. 
For instance, Narayanan, Wilson, and Sprintson [9| proposed 
a lattice-partition-based scheme for the case of equal channel 
gains. Subsequently, this scheme was extended to the case of 
unequal channel gains by Nam, Chung, and Lee |10|, and 
then extended to the case of block-fading by Wilson and 
Narayanan |fl6l . All of these schemes are able to approach 
the corresponding cut-set bounds for two-way relay channels. 

The C&F strategy can be enhanced by assuming that 
transmitters have access to additional side information. For 
example, it is shown in [17| that a modified version of the 
C&F strategy achieves all K degrees of freedom for a K x K 
MIMO channel; however, this scheme requires global channel- 
gain information at all transmitters. The C&F strategy can be 
extended to multi-antenna systems where each node in the 
network is equipped with multiple antennas fT8l . fl9l . It is 
shown in [18] that significant gains in the computation rate 
can be achieved by using multiple antennas at the receiver to 
steer the channel coefficients towards integer values. A recent 
survey of the C&F strategy can be found in |20|. 

In addition to the C&F strategy, we also note that, in 
some scenarios, it is advantageous to use the Quantize-Map- 
and-Forward and noisy network coding schemes [21|-[23|. 
However, all of these schemes require global channel-gain 
information at all destinations, whereas the (original) C&F 
strategy only requires local channel-gain information. 



C. System Model 

Motivated by the advantages of C&F relaying strategy, 
in this paper we study lattice-partition-based PNC schemes 
(called lattice network coding schemes for short) in practical, 
non-asymptotic, settings. In particular, we attempt to construct 
LNC schemes using practical finite-dimensional lattice parti- 
tions rather than the sequence of asymptotically-good lattice 
partitions; we attempt to construct LNC schemes under a 
"non-coherent" network model (where destinations have no 
knowledge of the operations of intermediate nodes) rather 
than the coherent network model described in [14|. No side 
information is assumed at the transmitters. 

Although our main focus in this paper will be on physical- 
layer techniques, we will now provide a general network 
model that provides a context for our approach. We consider 
wireless networks consisting of any number of nodes. A node 
is designated as a source if it produces one or more original 
messages and as a destination if it demands one or more 
of these messages. A node may be both a source and a 
destination, or neither (in which case it is called a relay). 

We assume that time is slotted and that all transmissions are 
approximately synchronized (at the symbol and block level, 
but not at the phase level). We also assume that nodes follow 
a half-duplex constraint; i.e., at any time slot, a node may 
either transmit or receive, but not both. Thus, at each time 
slot, a node may be scheduled as either a transmitter or a 
receiver (or remain idle). 

Nodes communicate through a multiple-access channel sub- 
ject to block fading and additive white Gaussian noise. At each 
time slot, the signal observed by a specific receiver is given 
by 

L 

y = ^2h e x e + z (1) 

1=1 

where Xi,...,X£ G C™ are the signals transmitted by the 
current transmitters, hx,...,liL £ C are the corresponding 
channel fading coefficients, and z ~ CW(0, N^l n ) is a 
circularly-symmetric jointly-Gaussian complex random vector. 
We assume that the channel coefficients are perfectly known 
at the receivers but are unknown at the transmitters. 
Transmitter I is subject to a power constraint given by 

-£[||x £ || 2 ] <P t . 
n 

For simplicity (and without loss of generality), we assume 
that the power constraint is symmetric (Pi = ■ • • = Pl) 
and that any asymmetric power constraints are incorporated 
by appropriately scaling the coefficients hg. 

Each communication instance consists of some specified 
number of time slots, in which a number (say, M) of fixed- 
size messages are produced by the sources and are required to 
be successfully delivered to their destinations. In this paper, 
we are interested in a multi-source multicast problem where 
each destination node demands all of the messages produced 
by all of the source nodes. This comprises a single use of the 
system. If desired, the system may be used again with a new 
set of messages. 

We now present a high-level overview of the proposed three- 
layer system architecture. 
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Layer 3 (top): This layer is responsible for scheduling, 
at each time slot, nodes as transmitters or receivers, as well as 
deciding on the power allocation. Note that although any node 
labeled a receiver is potentially listening to all current trans- 
mitters, only nodes within transmission range will effectively 
be able to communicate. 

Layer 2 (middle): This layer implements standard (multi- 
source) random linear network coding over a finite-field or, 
more generally, over a finite ring (see, Sec. HVl i. Each node is 
assumed to have a buffer holding fixed-size packets which are 
linear combinations of the M original messages. At each time 
slot, a transmitter node computes a random linear combination 
of the packets in its buffer and forwards this new packet to the 
lower layer. At each time slot, a receiver node receives from 
the upper layer one or more packets which are (supposedly) 
linear combinations of the M original messages and includes 
these packets in its buffer. It then performs (some form of) 
Gaussian elimination in order to discard redundant (linearly 
dependent) packets and reduce the size of the buffer. Initially, 
only the source nodes have nonempty buffers, holding the 
original messages produced at these nodes. When the commu- 
nication ends, each destination node attempts to recover all the 
original messages based on the contents of its own buffer. Note 
that the system is inherently noncoherent in the sense of 1241 . 
so messages are assumed to be already properly encoded in 
anticipation of this fact. For instance, each ith original message 
may include a header that is a length- P unit vector with a 1 
in position i; this ensures that original messages are indeed 
linearly independent. 

Layer 1 (bottom): This layer implements (linear) 
physical-layer network coding. At each time slot, a transmitter 
node takes a packet from the upper layer and maps it to a 
complex vector for transmission over the channel. At each time 
slot, a receiver node takes a complex received vector from the 
channel output and decodes it into one or more packets that 
are forwarded to the upper layer. These packets are required 
to be linear combinations of the packets transmitted by all the 
transmitter nodes within range. (By linearity, they will also 
be linear combinations of the M original messages.) Note, 
however, that only linearly independent linear combinations 
are useful. A receiver node will try to decode as many linearly 
independent packets as possible, but obviously the number of 
packets it is able to decode will depend on channel conditions. 

D. Outline of the Paper 

In the remainder of the paper, we mainly focus on the 
communication problem at Layer 1, as it fundamentally sets up 
the problems to be solved at the higher layers. In Section Hill 
we present a mathematical formulation of linear PNC at 
Layer 1. We then introduce Nazer-Gastpar's C&F strategy by 
summarizing some of their main results in the context of our 
formulation. Nazer-Gastpar's results are based on the existence 
of a sequence of lattice partitions of increasing dimension. 
Criteria to construct LNC schemes using practical, finite- 
dimensional, lattice partitions are not immediately obvious. 
The purpose of this paper is to study practical LNC schemes 
under a non-coherent network model. We note that lattice 



partitions possess both algebraic properties and geometric 
properties; both of these aspects will play important roles in 
this paper. 

We begin with the algebraic properties in Section [IV] 
presenting a general framework for studying LNC schemes 
by making a direct connection between the C&F strategy 
and module theory. In particular, we present a generic LNC 
scheme in Section IIV-BI that makes no assumption on the 
underlying lattice partition, which allows us to study a variety 
of LNC schemes. The generic LNC scheme is based on a 
natural projection, which can be viewed as a linear labelling 
that gives rise to a beneficial compatibility between the C- 
linear arithmetic operations performed by the channel and the 
linear operations in the message space that are required for 
linear network coding. The construction of the linear labelling 
is described in Section IIV-CI A key observation from the 
construction is that the message space of an LNC scheme is 
determined by the module-theoretic structure of the underlying 
lattice partition, which can be computed by applying the Smith 
normal form theorem. 

Applying the algebraic framework, we provide a convenient 
characterization of the message space of the Nazer-Gastpar 
scheme. More importantly, we show how standard construc- 
tions of lattice partitions can be used to design LNC schemes. 
In particular, we present three such examples in Section HY-DI 
all of which can be viewed as generalizations of the con- 
struction behind the Nazer-Gastpar scheme. Although some 
of these examples lead to message spaces more complicated 
than vector spaces, in Section IIV-EI we show that only slight 
modifications are needed in order to implement header-based 
random linear network coding. 

In Section [V] we turn to the geometric properties of lattice 
partitions. Geometrically, a lattice partition is endowed with 
the properties of the space in which it is embedded, such as 
the minimum Euclidean distance and the inter-coset distance. 
These geometric properties of lattice partitions determine 
the error performance of an LNC scheme, as explained in 
Section IV-AI In particular, we show that the error probability 
for hypercube-shaped LNC schemes is largely determined by 
the ratio of the squared minimum inter-coset distance and the 
variance of the effective noise in the high-SNR regime. This 
result leads to several design criteria for LNC schemes: 1) the 
receiver parameters (e.g., ag and a) should be chosen such 
that the variance of the effective noise is minimized, and 2) 
the lattice partition should be designed such that the minimum 
inter-coset distance is maximized. 

Applying these criteria, we provide explicit algorithms 
for choosing receiver parameters in Section IV-BI and give 
several specific methods for optimizing lattice partitions in 
Section IV-CI In particular, we show that the problem of 
choosing a single coefficient vector (ai, . . . , at,) is a shortest 
vector problem and that the problem of choosing multiple 
coefficient vectors is closely related to some lattice reduction 
problem. We introduce the nominal coding gain for lattice 
partitions — an important figure of merit for comparing 
various LNC schemes. We then illustrate how to design lattice 
partitions with large nominal coding gains. 

Section [VI] contains several concrete design examples of 
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practical LNC schemes. It is shown through both analysis 
and simulation that a nominal coding gain of 3 to 5 dB 
is easily obtained under practical constraints, such as short 
packet lengths and reasonable decoding complexity. (A more 
elaborate scheme, based on signal codes 11251 . is described in 
[26 1). Section [VlTI concludes this paper. 

The following section presents some well-known mathemat- 
ical preliminaries that will be useful in setting up our algebraic 
framework. 

II. Algebraic Preliminaries 

In this section we recall some essential facts about principal 
ideal domains, modules, and the Smith normal form, all of 
which will be useful for our study of the algebraic properties 
of complex lattice partitions. All of this material is standard; 
see, e.g., 1271-1291. 

A. Principal Ideal Domains and Gaussian Integers 

Recall that a commutative ring R with identity 1 ^ is 
called an integral domain if it has no zero divisors, i.e., if, 
like the integers Z, it contains no two nonzero elements whose 
product is zero. An element a is a divisor of an element b in R, 
written a | b, if b = ac for some element c G R. An element 
u G R is called a unit of R if u | 1. A non-unit element p G R 
is called a prime of R if whenever p \ ab for some elements 
a and b in R, then either p \ a or p \ b. An ideal of R is a 
nonempty subset I of R that is closed under subtraction and 
inside-outside multiplication, i.e., for all a, b G /, a — b G / 
and for all a € J and all r G R, ar € /. If A is any nonempty 
subset of R, let (A) be the smallest ideal of R containing 
A, called the ideal generated by A. An ideal generated by a 
single element is called a principal ideal. An integral domain 
in which every ideal is principal is called a principal ideal 
domain (PID). 

Let R be a ring and let / be an ideal of R. Two elements a 
and b are said to be congruent modulo I if a — b £ I. Congru- 
ence modulo / is an equivalence relation whose equivalence 
classes are (additive) cosets a + I of I in R. The quotient 
ring of R by /, denoted R/I, is the ring obtained by defining 
addition and multiplication operations on the cosets of / in R 
in the usual way, as 

(a + I) + {b+I) = {a + b) + I and (a+I) X (b+I) = (ab) + I. 

The so-called natural projection map ip : R —> R/I is defined 
by p(r) — r + I, for all r G R. 

The integers Z form a PID. In the context of complex 
lattices, the set of Gaussian integers Z[i] is an example of 
a PID. Formally, Gaussian integers are the set Z[i] = {a + bi : 
a, b G Z}, which is a discrete subring of the complex numbers. 

A Gaussian integer is called a Gaussian prime if it is a 
prime in Z[i], A Gaussian prime a + bi satisfies exactly one 
of the following: 

1) |a| = |6| = l; 

2) one of \a\, \b\ is zero and the other is a prime number 
in Z of the form 4n + 3 (with n a nonnegative integer); 

3) both of \a\, \b\ are nonzero and a 2 + b 2 is a prime number 
in Z of the form 4n + 1 . 



Note that these properties are symmetric with respect to \a\ 
and |6|. Thus, if a + bi is a Gaussian prime, so are {±a ± bi} 
and {±6 ± ai). 

B. Modules 

Modules are to rings as vector spaces are to fields. Formally, 
let R be a commutative ring with identity 1=^0. An i?-module 
is a set M together with 1 ) a binary operation + on M under 
which M is an abelian group, and 2) an action of R on AI 
which satisfies the same axioms as those for vector spaces. 

An i?-submodule of M is a subset of M which itself forms 
an i?-module. Let iV be a submodule of AI. The quotient 
group M /N can be made into an i?-module by defining an 
action of R satisfying, for all r G R, and all x + N G M/N, 
r(x + N) — (rx) + N. Again, there is a natural projection 
map, <p : M — > M/N, defined by <p(x) = x + N, for all 
x G M. 

Let M and N be i?-modules. A map <p : M — > N is called 
an R-module homomorphism if the map ip satisfies 

1) p(x + y) — p(x) + p(y), for all x, y G M and 

2) tp(rx) = rip(x), for all r G R, x G M. 

The set kerp = {m G M : p(m) = 0} is called the kernel of 
p and the set tp{M) = {n G N : n — p(m) for some m G 
M} is called the image of ip. Clearly, ker p is a submodule 
of M, and p(M) is a submodule of N. 

An i?-module homomorphism p : M — > N is called an 
R-module isomorphism if it is both injective and surjective. 
In this case, the modules M and N are said to be isomorphic, 
denoted by M = N. An i?-module AI is called a free module 
of rank k if M = R k for some nonnegative integer k. 

There are several isomorphism theorems for modules. The 
so-called "first isomorphism theorem" is useful for this paper. 

Theorem 1: (First Isomorphism Theorem for Modules 11281 
p. 349]) Let M, N be i?-modules and let ip : M -)■ N be an 
i?-module homomorphism. Then ker p is a submodule of AI 
and M/ ker 93 = <p(M). 

Let Ad be an i?-module. An element r G R is said to 
annihilate AI if rm = for all m G AI. The set of all elements 
of R that annihilate AI is called the annihilator of AI, denoted 
by Ann(M). The annihilator Ann(M) of M has some useful 
properties: 

1) Ann(A/) is an ideal of R. 

2) M can be made into an i?/Ann(M)-module by defining 
an action of the quotient ring i?/Ann(Af) on Mas (r + 
Ann(M))m = rm, W G R,m G AI. 

3) More generally, M can be made into an i?//-module in 
this way, for any ideal / contained in Ann(Af). 

C. Modules over a PID 

Finitely-generated modules over PIDs play an important role 
in this paper, and are defined as follows. 

Definition 1 (Finitely-Generated Modules): Let R be a 
commutative ring with identity 1^0 and let AI be an R- 
module. For any subset A of AI, let (A) be the smallest sub- 
module of AI containing A, called the submodule generated 
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by A. If M = (A) for some finite subset A, then M is said 
to be finitely generated. 

A finite module (i.e., a module that contains finitely many 
elements) is always finitely generated, but a finitely-generated 
module is not necessarily finite. For example, the even integers 
2Z form a Z-module generated by {2}. 

Let R be a PID and let M be a finitely-generated i?-module. 
If {mi, rrj2, . . . , m t } is a generating set for M, then we have a 
surjective i?-module homomorphism ip : R l — > M that sends 
(fx, . . . ,r t ) e i?* to 2~2i=i r i m i S A/. Let A' be the kernel 
of tp. If (ri, . . . , r t ) G A", then 2~2l=i r i m i — 0- Thus, each 
element of K induces a relation among {mi, . . . ,m t }. For 
this reason, K is referred to as the relation submodule of R l 
relative to the generating set {mi, . . . ,m t }. It is known [28 
p. 460] that K is finitely generated. Let {ki,...,k s } C i?' 
be a generating set for K. Suppose ki — (an, a^,. . . , an), 
for i — 1, . . . , s. Then the s x t matrix A = [ay] is called 
a relations matrix for M relative to the two generating sets 
{mi, . . . ,m t } and {fci, . . . ,k s }. 

The following structure theorem says that a finitely- 
generated i?-module is isomorphic to a direct sum of modules 
of the form R or R/(r). 

Theorem 2: (Structure Theorem for Finitely-Generated 
Modules over a PID — Invariant Factor Form [28, p. 462]) 
Let R be a PID and let M be a finitely generated R- 
module. Then for some integer m > and nonzero non-unit 
elements r\ , . . . , rjt of R satisfying the divisibility relations 
r\ | r 2 | • • • | r k , 

M S if™ © i?/(n) © i?/(r 2 ) © • • • © i?/(r fe ). 

The elements n, . . . , r^, called the invariant factors of M, 
are unique up to multiplication by units in R. 

A consequence of Theorem [2] is the so-called Smith normal 
form theorem. 

Theorem 3 (Smith Normal Form l[29]l): Let R be a PID and 
let A be an s x t matrix over R (s < t). Then, for some 
invertible matrices P and Q over R, we have PAQ = D, 
where D is a rectangular diagonal matrix 

D = diag(n,...,r fc , 0,...,0) 



with nonnegative integers k,l,m satisfying k + l + m — s and 
nonzero non-unit elements rt , . . . , of R satisfying n | r 2 \ 
■ ■ ■ | rfc. The elements n, . . . , ffc, called the invariant factors 
of A, are unique up to multiplication by units in R. 

Theorems [2] and [3] are connected as follows. If the matrix 
A is a relations matrix for M, then the invariant factors of A 
are the invariant factors of M. 

III. Physical-Layer Network Coding 

In this section, we describe in more detail the physical- 
layer network coding problem at Layer 1 . We first consider a 
"basic setup," where the receiver is interested in computing a 
linear combination whose coefficient vector is predetermined. 
We then consider an "extended setup" where the receiver is 
interested in computing multiple linear combinations whose 
coefficient vectors are chosen "on-the-fly" by the receiver. 




u 



a e w e 



Fig. 1. Computing a linear function over a Gaussian multiple-access channel. 



Finally, we briefly describe the C&F strategy of Nazer and 
Gastpar lfT4ll by summarizing some of their main results. 

A. Basic Setup 

As shown in lfT4l . the essence of a (linear) PNC scheme can 
be abstracted as the problem of computing a linear function 
over a Gaussian multiple-access channel as depicted in Fig. [TJ 

Let the message space W be a finite module over some 
commutative ring A. Let Wi , . . . , wj, € W be the messages 
to be transmitted by L transmitters. We regard the messages as 
row vectors and stack them into a matrix W = [w^ • • • w^] T . 
Transmitter £ applies the encoder 



£(.):W 



that maps a message in W to a complex-valued signal in C n 
satisfying an average power constraint 

-E[\\S(w e )\\ 2 ] <P, 

where the expectation is taken with respect to a uniform 
distribution over W. 

As defined in (Q]), the receiver observes a channel output 



y = ^2 heXe + ! 



where the complex-valued channel gains h\,...,hi, are 
known perfectly at the receiver, but are unknown at the 
transmitters. 

The objective of the receiver (in this basic setup) is to 
decode the linear combination 

L 

u = ^2 a i w e 
i=i 

of the transmitted messages, for a fixed coefficient vector a = 
(oi, . . . ,at,). In matrix form, the objective of the receiver is 
to compute u = aW. This is achieved by applying a decoder 

£>(• | •) : C" x C L -> W, u = V(y \ h) 

that computes an estimate u of the linear function u. A 
decoding error is made if u ^ u; the probability of decoding 
error is denoted as 

P e (h,a)iPr[u^u]. 
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For the above linear PNC scheme, we define the message 
rate as 

' (2) 



i? me5 = -log a |W|. 

n 

For convenience, we define 

SNR = P/N Q . 



(3) 



Note that the received SNR corresponding to signal xe is equal 
to \hi\ 2 P/No. Hence, the interpretation of SNR as the average 
received SNR is only valid when i?[|/i<>| 2 ] = 1 for all £. 

This basic setup can be used to describe many existing PNC 
schemes, as shown in the following examples. 

Example 1: Let L — 2, and let A — W — Z 2 . Consider the 
encoder 



£(w) = 7 I w 



1 



, w g Z 2 = {0, 1} 



where 7 > is a scaling factor, and we treat Z 2 = {0, 1} as 
a subset of C. Suppose h = [1 1]. Let a = [1 1] be the fixed 
coefficient vector. Then a decoder can be constructed as 



V{y I [1 l]) = 



1, if |Re{y}| < 7/2 
0, otherwise. 



This is the simplest form of PNC 0,0. 

Example 2: Let L — 2, and let A = W = (to), where 
to is some positive integer. Consider the encoder 

£ (w) = 7 (w — d) , 

w e Z[i]/(m) = {a + bi : a, b 6 {0, . . . , m - 1}} 

where d = ( 2i 2 ~^) (1 + 7 > is a scaling factor, and we 
treat Z[i]/ (to) = {a + bi : a, b G {0, . . . , to — 1}} as a subset 
of C. Suppose h = [1 1]. Let a = [1 1] be the fixed coefficient 
vector. Then a natural (although suboptimal) decoder is given 
by 

V(y I [1 1]) = (|Re{j/}] mod to) + i(|Im{?/}] mod m) , 

where y' = y/j + 2d. This scheme is known as the m 2 -QAM 
PNC scheme 0). 

B. Extended Setup 

There are several restrictions on the previous basic setup. 
For example, the coefficient vector is fixed rather than chosen 
"on-the-fiy" by the receiver, and only one linear combination 
is computed by the receiver rather than multiple linear combi- 
nations. Hence, a more general setup of linear PNC schemes 
can be described as follows. A linear PNC scheme consists of 
an encoder 

£(-):W^C n , xt=£{w e ) 



and a decoder 
T>(- I •) : C r 



W m , (u 1) ...,u m )=P(y|h). 



The encoder maps a message wi in W to a complex-valued 
signal x.£ in C". The decoder computes estimates u^, . . . , u m 
of to linear functions u 1; . . . , u m whose coefficient vectors 
are chosen by the receiver. (In practice, even the parameter to 
can be chosen "on-the-fly" by the receiver.) 



Let u, ; = 2~2g=i a u w ii an d l et A = [o,u] be an to x L matrix 
of coefficients over A. In matrix form, the decoder wishes to 
decode U = AW, where W is the matrix of transmitted 
messages. A decoding error is made if U ^ AW where U = 
[u^ • • ■ u„] T ; the probability of decoding error is denoted as 

P e (h, A) = Pr[U ^ AW]. 

In addition to the generality, the extended model has some 
other advantages over the basic setup. If a receiver is able to 
decode more than one linear combination successfully, then it 
is beneficial for the network throughput especially when the 
receiver is a destination. If a receiver is required to decode L 
(linearly independent) linear combinations, then the extended 
model can be regarded as a distributed L x 1 MIMO system 
or a multi-user detection system. As such, a PNC scheme is 
automatically a solution to these communication problems and 
may provide some potential performance improvement. This 
advantage of the extended model has been explored in |30|, 

mi. 

C. Nazer-Gastpar Scheme 

Nazer and Gastpar [14| propose a lattice-partition-based 
PNC scheme for which the commutative ring A is chosen to 
be the Gaussian integers Z[i], Although not originally stated in 
this form, some of the main results in [ 14] can be summarized 
as in the following theorem. 

Theorem 4 ( H14V ): Let Ui, . . . , u m be a set of 1, i -linear 
functions of the transmitted messages and let a^ be the 
coefficient vector for u^, i.e., the ith row of the coefficient 
matrix A. Let r be a real number satisfying 



r < min < log 2 




SNR| ai h+| 2 
l + SNR||h|| : 



where SNR is defined in (0). Then there exists an (infinite) 
sequence of lattice partitions Aj/A'j, where Aj and have 
dimension j, based on which a PNC scheme satisfies the 
following properties: 

1) the message rate i? mes (as defined in (O) is given by 
,R mes = max{r, 0}; 

2) the probability of decoding error P e (h, A) — > 0, as j 

CO. 

For the basic setup, Theorem [4] implies that the following 
message rate 

R mes = max I log 2 f ( \\^- ^^X, V 




l + SNR||h|| 2 

is achievable, where a is the fixed coefficient vector. 

For the extended setup, Theorem [4] implies that a linear 
function can be decoded correctly as long as 



> Rn 



where a^ is the coefficient vector for Uj. 

Note that Nazer-Gastpar' s results are based on the existence 
of a "good" sequence of lattice partitions of increasing di- 
mension. Criteria to design practical, finite-dimensional, LNC 
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schemes are not immediately obvious from these results. In 
the remainder of this paper, we will develop an algebraic 
framework for studying LNC schemes, which facilitates the 
construction of practical LNC schemes as well as the analysis 
of their performance. 

IV. Algebraic Framework of Lattice Network 
Coding 

Inspired by Nazer-Gastpar's C&F scheme, in this section, 
we present a general framework for studying a variety of 
LNC schemes. Our framework is algebraic and makes a direct 
connection between the Nazer-Gastpar scheme and module 
theory. This connection not only sheds some new light on the 
Nazer-Gastpar scheme, but also leads to several generalized 
constructions of LNC schemes. 

A. Definitions 

Our algebraic framework is based on a class of complex 
lattices called i?-lattices, which are defined as follows. Let R 
be a discrete subring of C forming a principal ideal domain 
(PID). Typical examples include the integer numbers Z and the 
Gaussian integers Let N < n. An R-lattice of dimension 
N in C" is defined as the set of all i?-linear combinations of 
N linearly independent vectors in C n , i.e., 

A = {rG A : r e R N }, 

where Ga £ i^Nxn j s fuii.j-ank 0V er C and is called a 
generator matrix for A. (In most cases considered in this paper, 
N = n.) Algebraically, an i?-lattice is an i?-module. 

An R-sublattice A' of A is a subset of A which is itself 
an i?-lattice, i.e., it is an i?-submodule of A. The set of all 
the cosets of A' in A, denoted by A/A', forms a partition 
of A, hereafter called an R-lattice partition. Throughout this 
paper, we only consider the case of finite lattice partitions, i.e., 
A/ A' | is finite, which is equivalent to saying that A' and A 
have the same dimension. 

A nearest-lattice-point (NLP) decoder is a map Vj\ : C" — > 
A that sends a point x £ C" to a nearest lattice point in 
Euclidean distance, i.e., 



X\ e C" u = aeu>e 



2?a(x) = argmin llx — All. 



(4) 



The set V(A) = {x : D A (x) = 0} of all points in C" that 
are closest to the origin is called the Voronoi region around 
the origin of the lattice A. The NLP decoder satisfies, for all 
lattice points A 6 A and all vectors x £ C n , 



2? A (A + x) = A + P A (x) 



B. Encoding and Decoding 

We present a generic LNC scheme that makes no assump- 
tions on the underlying lattice partition. As such, our generic 
LNC scheme can be applied to study a variety of LNC 
schemes. 

We let the message space W = A/ A'. Clearly, W is 
a finitely-generated i?-module. The encoding and decoding 
methods of the generic scheme are based on the natural 




Fig. 2. Architecture of the encoding and decoding methods for LNC. 



projection map <p : A — > A/ A', taking A 6 A to a coset 
A + A' of A' in A containing A. 

We note that the map ip may be regarded as a labelling of 
the points of A with elements of the module W; a lattice point 
A e A is labelled with its projection cp( A) = A + A'. We note 
that the labelling <p is i?-linear; thus for all r\ . r 2 £ R and all 
Ai, A 2 £ A we have <^(riAi + r 2 A 2 ) = n<p(\i) + r 2 (p(X 2 ). 
For this reason, we refer to the map ip as a linear labelling of 
A. When R is a subring of C, as will be the case throughout 
this paper, the use of a linear labelling induces a natural 
compatibility between the C-linear arithmetic of the multiple- 
access channel observed by the receiver, and the i?-linear 
arithmetic in the message space W, and this compatibility is 
what we exploit to define a generic LNC scheme. 

We will also need an injective map tp : W — > A having the 
property that ^(^(w)) = w, for all w £ W. We view (p as 
implementing an embedding of W in A in a manner that is 
compatible with cp; equivalently, the image of (p provides a 
system of coset representatives for the cosets of A' in A. 

A high-level view of our generic LNC scheme is as follows. 
Equipped with the linear labelling ip (and an associated em- 
bedding map (p), the encoder maps a message w + A' G A/A' 
to a point of A in w + A' by using the embedding map ip; the 
decoder estimates one or more i?-linear combinations from a 
C-linear combination (i.e., the received signal) and then maps 
these i?-linear combinations to elements in A/ A' by using the 
linear labelling p. We now describe these procedures in more 
detail. 

1 ) Encoding and decoding for the basic setup: Let a be a 
predetermined coefficient vector, and let W denote the matrix 
of transmitted messages. The receiver is interested in decoding 
aW. 

A generic LNC scheme consists of an encoder 

£{■) : W -> C", x, = £(w e ) = (p{w t ) - V K ,{(p{w t )) (6) 
and a decoder 



(5) Z>(- 



W, u = £>(y | h) = v (V A (ay)), (7) 



as depicted in Fig. 

We note that the encoder £ is a standard Voronoi constel- 
lation encoder, as described, e.g., in l32l . 1331 . taking the 
messages in W to a system of coset representatives for the 
cosets of A' in A in which each coset representative falls 
within the Voronoi region V(A') around the origin of A'. 
The Voronoi region V(A') can therefore be interpreted as the 
shaping region. In practice, for reasons of energy-efficiency, it 
may be preferable (as in Examples Q] and [2]) to transmit points 



s 



from a translate of A rather than from A. Such translation is 
easily implemented at the transmitters and accommodated (by 
subtraction) at the receiver. A pseudorandom additive dither 
can be implemented similarly. 

We note that the decoder T) first detects an i?-linear com- 
bination J2i a e x e from the C-linear combination £\ h(X£ + z 
(i.e., the received signal) by using a scaling operator a and 
an NLP decoder T> A . The decoder then maps J^e a i :x -i ( an 
element in A) to J^e a,e~we (an element in W) by using 
the linear labelling p. The rationale behind this decoding 
architecture is explained by the following proposition. 

Define 



n = ) (aht - ai)x£ + az, 



(8) 



6=1 



which is referred to as the effective noise for the reason as 
seen shortly. 

Proposition 1: The linear function u = 2~2e a e w z I s de- 
coded correctly if and only if T> A (n) £ A'. 
Proof: Note that 

L 

ay = cxhgXg + az 
1=1 
L L 

= a^X£ -I- ^2(ah e - ai)-Ki + az 
i=\ t=i 



^ at x<> + n 

i=i 

L 

^2 a* (<£( w <) - T>a> (<p(vrt))) + n 



Thus, we have 



(f{V A (ay)) 




L 

E 

i=i 



ae(<p(we) - T> A ,((p(w e ))) + n 



at{<p(wt) - P A '(v( w ^))) + ( n ) 



a e Mv e + V (£>A (n)) 



(9) 



(10) 



where (0 follows from the property of an NLP decoder 
T> A and ( TTOb follows from the fact that tp is an i?-module 
homomorphism with kernel A'. Therefore, u = u if and only 
if p (V A (n)) = 0, or equivalently, V A (n) £ A'. ■ 
Proposition [T] suggests that the effective noise n should be 
made "small" so that T> A (n) returns, in particular, the point 
0. This can be achieved by choosing an appropriate scalar a, 
which will be discussed fully in Sec. IV-BI Here, we point out 
that the decoder architecture induces an equivalent point-to- 
point channel with input a e K e an d additive channel noise 
n. Hence, the decoding complexity of our generic scheme is 
not essentially different from that for a point-to-point channel 
using the same lattice partition. 



We also note that a generalized lattice quantizer that satisfies 
the property (O (e.g., see [34]) can also be applied to the 
encoding and decoding operations. This may provide some 
practical advantages (at the expense of error performance). 

2) Encoding and decoding for the extended setup: The 
encoding architecture for the extended setup is precisely the 
same as that for the basic setup. The decoding architecture 
is similar to that for the basic setup, except the receiver has 
the freedom to choose coefficient vectors for multiple linear 
combinations. Once these coefficient vectors are chosen, the 
receiver applies exactly the same decoder as that for the basic 
setup. Hence, the decoding architecture for the extended setup 
only contains an additional component of choosing multiple 
coefficient vectors, which will be discussed fully in Sec. IV-BI 

C. Algebraic Structure of Lattice Partitions 

As shown in the previous section, the linear labelling ip 
(and the associated embedding <p) play important roles in the 
encoding and decoding methods of our generic scheme. In 
this section, we construct the maps ip and (p explicitly and 
show that the message space of the generic LNC scheme 
is determined by the module-theoretic structure of the lattice 
partition A/ A'. Our main theoretical tool is the fundamental 
theorem of finitely generated modules over a PID. 

Theorem 5 (Structural Theorem for R-Lattice Partitions): 
Let A/ A' be a finite i?-lattice partition. Then for some 
nonzero, non-unit elements 7Ti , . . . , %k £ R satisfying the 
divisibility relations 7Ti | tx% \ ■ ■ ■ \ TTfe, 

A/A' = i?/(7ri) © R/(ir 2 ) © ■ • • © R/(ir k ). 

Proof: By Theorem |2l we have 

A/A' £ R m © R/( n ) © R/(r 2 ) © ■ • • © R/(r k ), 

for some integer m and some invariant factors r±, . . . , r k of 
A/A'. Note that, since |A/A'| is assumed to be finite, the 
integer m must be zero. ■ 

Theorem [5] characterizes the module-theoretic structure of 
A/ A'. By Theorem |5] the message space W, which we have 
taken to be equal to A/ A', is isomorphic to R/(ri) © • • • © 
R/(rk). Without loss of generality, we may identify W with 
this direct sum in the rest of the paper. 

To construct the linear labelling ip from A to W, we apply 
the Smith normal form, as shown in the following theorem. 

Theorem 6: Let A/ A' be a finite i?-lattice partition. Then 
there exist generator matrices Ga and Ga' for A and A', 
respectively, satisfying 



diag(7ri, . . . ,7T fc ) 
I N -k 



(11) 



where m, . . . ,-Kh are the invariant factors of A/ A'. Moreover, 
the map 

tp : A -> i?/(7Ti) © • • • © R/(n k ) 

given by 

<^(rG A ) = (n + (ttO, ...,r k + (ir k )) (12) 
is a surjective i?-module homomorphism with kernel A'. 
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Proof: Let Ga and Ga' be any generator matrices for A 
and A', respectively. Then Ga' = JGa, for some nonsingular 
matrix J G R Ny N . Since R is a PID, by Theorem |3] the 
matrix J has a Smith normal form 



D 



7Tl 



7T& 



PJQ 



where P,Q 6 rNxn are i nV ertible over R, and tti | 7T2 | • • • | 
7Tfe. Thus, we can take 

Ga = Q _1 Ga 
G a < = PGa' = DG A 

as new generator matrices for A and A'. Here our notation 
suggests that m, . . ■ ,TTf- are the invariant factors of A/A'; this 
fact will be clear after the second statement is proved. 

Since Ga has rank N, it follows that each lattice point 
A G A has a unique representation as A = tGa, and thus the 
map ip in (fT~2T > is well defined. It is easy to see that the map <p 
is a surjective i?-module homomorphism. Next, we will show 
that the kernel of ip is A'. Note that 



^(rG A ) = 



G (7Ti), Vi = 1, . . . , k. 



Note also that 



A' = {tGa : T{ G (7Ti), Vt = l,...,fc}, 

because Ga' = DGa. Hence, the kernel of ip is A'. Then by 
the first isomorphism theorem (Theorem [U, we have 

A/A' £ R/(tti) © • • • © R/(TT k ). 

Finally, by the uniqueness in Theorem [2] tti, . . . , 7Tfc must 
be the invariant factors of A/ A'. This also follows from the 
observation that J is a relations matrix for A/ A' relative to 
the rows of Ga and Ga'- ■ 
Theorem [6] constructs a surjective i?-module homomor- 
phism ip : A — » W, i.e., an i?-linear labelling of A, explicitly. 
The next step is to construct the map (p. Consider the natural 
projection map a : R k — >• W defined by a(r) = (r\ + 
(m ),..., rk + (tt/c))- Let o \ W — y R be some injective 
map such that er(er(w)) = w, for all w G W. Then the map 
tp can be constructed as 



<p(vr) = ct(w) [Ifc 0]G A . 



(13) 



To sum up, the maps ip and tp can be constructed explicitly 
by using (fT~2b and dT3l > whenever there exist generator matrices 
Ga and Ga' satisfying the relation <fTTT >. 

D. Constructions of Lattice Partitions 

In the previous sections, we presented an algebraic frame- 
work for studying a variety of LNC schemes. In this sec- 
tion, we first apply the algebraic framework to study Nazer- 
Gastpar's C&F scheme, showing that the message space of the 
Nazer-Gastpar scheme is isomorphic to a vector space over F p 2 
or a direct sum of two vector spaces over F p , depending on 
the prime parameter p. We then apply the algebraic framework 



to construct three classes of lattice partitions, all of which can 
be viewed as generalizations of Nazer-Gastpar's construction 
of lattice partitions. 

The following example describes a variant of the class of 
lattice partitions constructed by Nazer and Gastpar. 

Example 3 (Lifted Construction A): Let p be a prime in Z. 
Let C be a linear code of length n over Z/(p). Without loss 
of generality, we may assume the linear code C is systematic. 
Define a "Construction A lattice" [ 35 1 Ac as 



where a : Z™ 
Define 



A c 4 {A G Z" : CT (A) G C}, 
— > (Z/(p)) n is the natural projection map. 

A' c = {pr : r G Z™}. 

It is easy to see that A' c is a sublattice of Ac- Hence, we obtain 
a Z-lattice partition Ac/A c from the linear code C. 

Now we "lift" this Z-lattice partition Ac/A c to a Z[i]-lattice 
partition. Let Ac = Ac + iAc, i.e., 

A c = {A G Z\i} n : Re{A},Im{A} G A c }. 

Similarly, let A' c = A' c + iA' c . In this way, we obtain a Z-- 
lattice partition Ac/A' c . 

To study the structure of the partition Ac/A' c , we specify 
two generator matrices satisfying the relation (fTTT i. We note 
that the lattice Ac has a generator matrix Ga c given by 



G Ac = 







Ik 

(ti— fe) X k 



B 



fex (n — fc) 
pln-k 



where cr[I B] is a generator matrix for C. The lifted lattice Ac 
has a generator matrix Ga c of the same form (but over Z[i]). 
Similarly, we note that the lattice A' c has a generator matrix 
G 



A' c gi ven b y 







plk 

(n-k)xk 



P^kx(n-k) 
pln-k 



These two generator matrices Ga c and Ga' satisfy 



G A' = 









In-fe 



'Ac ■ 



It follows from Theorem [6] that A/ A' = (Z\i]/(p)) k . ■ 
If the prime p in Example|3]is of the form 4n+3, then p is a 
Gaussian prime and A/ A' is isomorphic to a vector space over 
the field Z[i]/(p). If the prime p is of the form 4n+ 1 or if p = 
2, then p is not a Gaussian prime and A/ A' is isomorphic to a 
free module over the ring Z[i]/(p). In this case, since p can be 
factored into two Gaussian primes, i.e., p = tttt*, where ir* is 
a conjugate of ir, it can be shown from the Chinese remainder 
theorem ll28l p. 265] that A/ A' is isomorphic to a direct sum 
of two vector spaces, i.e., A/A' = Z[i\/(ir) k © Z[i]/(-K*) k . To 
sum up, the message space W is isomorphic to either a vector 
space over F p 2 or a direct sum of two vector spaces over ¥ p , 
depending on the choice of the prime p. 

Nazer-Gastpar's construction of lattice partitions is based 
on Construction A. As is well known, Construction A may 
produce "asymptotically-good" lattices and/or lattice partitions 
in the sense of lfl5l . ll36l . However, this generally requires 
both the prime p and the dimension n to go to infinity. From 
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a practical point of view, Construction A may not be the 
best method of constructing lattices and/or lattice partitions. 
There are several alternative methods in the literature, such as 
complex Construction A, Construction D [35], low-density- 
parity-check lattices ll37ll . signal codes 11251 . and low-density 
lattice codes [38], to name a few. Our algebraic framework 
suggests that all of these methods may be used to construct 
lattice partitions for LNC schemes. In the sequel, we present 
three constructions of lattice partitions, all of which can be 
viewed as generalizations of Nazer-Gastpar's construction. 

The first example is based on complex Construction A. 

Example 4 (Complex Construction A): Let 7r be a prime in 
R. Let C be a linear code of length n over R/ (tt). Without loss 
of generality, we may assume the linear code C is systematic. 

Define a "complex Construction A lattice" [35| Ac as 

Ac = {A 6 R n : ct(A) e C}, 
R n — > (i?/(7r))™ is the natural projection map. 

A' c 4 {nr : r 6 R n }. 

It is easy to see A' c is a sublattice of Ac- Hence, we obtain a 
lattice partition Ac/A' c from the linear code C. 

To study the structure of Ac/A c , we specify two generator 
matrices satisfying the relation JTTb . It is well-known that Ac 
has a generator matrix Ga c given by 



where a 
Define 







h 

(n — k) X k 



Bfex (ri— fe) 



and that A' c has a generator matrix Ga' c given by 



G 



A' 







(n — k) X fe 



7rB 



fcx (n — k) 
7Tln_fc 



These two generator matrices satisfy 



G 



A' 







i — k 



G 



Ac ■ 



Hence, we have A/A' = (i?/(7r)) fe . We note that complex 
Construction A reduces to lifted Construction A when R = 
Z[i], tt is a prime in Z of the form An + 3, and the matrix 



fcx(n-fc) m G A j, contains only elements of Z. 



B 

Our next example replaces Construction A with Construc- 
tion D. 

Example 5 (Lifted Construction D): Let p be a prime in Z. 
Let Co 3 Ci D • • • D C a be nested linear codes of length n 
over Z/ (p), where C, has parameters [to, fcj] for i = 0, . . . , a, 
and fc = n.. Without loss of generality, there exists a basis 
{gi, . . . , g„} for (Z/(p)) n such that 1) gi, . . . , g fcs span d 
for i = 0, . . . , a, and 2) if G denotes the matrix with rows 
gi, . . . , g„, some permutation of the rows of G forms an upper 
triangular matrix with diagonal elements equal to 1. 

Using the nested linear codes {Ci, < i < a}, we define a 
"Construction D lattice" |35| A as 

!a ki 
+ EE^A^g,) : fa E Z/(p) 
i=i j=l 

where fa G {0, . . . ,p — 1}, "+" denotes ordinary addition 
in C™, and a is a natural embedding map from (Z/(p)) n to 



{0, . . .,p — 1}". It is easy to see that the lattice defined by 
A' = {p a r : r S Z™} is a sublattice of A. Hence, we obtain a 
Z-lattice partition A/ A' from the nested linear codes {Ci , < 
i < a}. 

Next we lift this Z-lattice partition A/ A' to a "... / -lattice 
partition A/ A' using the procedure in Example [3] That is, we 
set A = A + iA and A' = A' + iA'. In this way, we obtain a 
Z[i]-lattice partition A/A'. 

In Appendix [A] we show that there exist two generator 
matrices G A and G A / satisfying 

G A , = diag(p 1 ___p, p\_^j?, pV_^)G A . (14) 

ki—k2 k2—k$ k a 

It follows from Theorem [6] that 

A/A' £* (Z[ l ]/(p)) fcl - fc2 ©(Z[ i ]/(p 2 )) fc2 - fc3 ®- • -©(ZW/^))^ 

When a = 1, lifted Construction D reduces to lifted Construc- 
tion A. ■ 

Our final example combines the ideas behind complex 
Construction A and lifted Construction D. 

Example 6 ( Complex Construction D): Let n be a prime in 
R. Let Cq D Ci 3 ■ • • 3 C Q be nested linear codes of length n 
over R/(tt), where Ci has parameters [n, fc^] for i = 0, . . . , a, 
and fco = n. Without loss of generality, there exists a basis 
{gi, ■ • ■ , g«} for (R/(n)) n such that 1) gi, . . . , g kz span d 
for i — 0, . . . ,a, and 2) if G denotes the matrix with rows 
gi, . . . , g„, some permutation of the rows of G forms an upper 
triangular matrix with diagonal elements equal to 1. 

Using the nested linear codes {Ci,0 < i < a}, we define 
an i?-lattice A as 



A - U { naRn 



a ki 
i=l ] = 1 



l (3ij(j(gj) : fa S A n 



where is a system of coset representatives for R/(ir), "+" 
denotes ordinary addition in C n , and a is an embedding map 
from (i?/(7r))™ to A™. It is easy to verify that the lattice 
defined by A' ^ {7r a r : r S R n } is a sublattice of A. Hence, 
we obtain an i?-lattice partition A/ A' from the nested linear 
codes {d, < i < a}. 

Similar to Example |5] we have A/A' ^ (R/ '(t:))^-^ © 
(R/i-K 2 ))^-^ © ••• © (i?/(vr a )) fc ». When a = 1, complex 
Construction D reduces to complex Construction A. ■ 

Note that when a lattice partition is isomorphic to a vector 
space or a direct sum of two vector spaces (e.g., those in 
Example [3] and Example |4j, it is convenient to implement 
random linear network coding at Layer 2, since many of the 
useful techniques (e.g., the use of headers for non-coherent 
network coding) from the network coding literature can be 
applied in a straightforward way. When a lattice partition has 
a more complicated structure (e.g., those in Example [5] and 
Example 01, the implementation of random linear network 
coding requires some modification, as discussed in the next 
section. 

E. Non-Coherent LNC 

Recall that "headers" are usually used to implement random 
linear network coding at Layer 2 in non-coherent settings. In 
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this section, we discuss how to design "headers" for a message 
space which is more complicated than a vector space. 

Consider a general message space W = R/ (n\)®R/ {itz)® 
■ ■ • © R/ (7Tfe), where m \ 7r 2 \ ■ ■ ■ \ Kk- We propose to use the 
first k — P summands to store payloads and to use the last P 
summands to store headers, where P denotes the number of 
packets in a generation. In other words, the "payload space" 
Wpayioad is given by 

Wpayload = R/{7Tl) © • • • © R/{lT k -p) 

and the "header space" Wheader is given by 

^header = R/{lt k -P+l) © • • • © R/(lT k ). 

It is easy to see the annihilator Ann.(Wp a yioad) of the payload 
space is given by Ann(W / P ayioad) = (irk~p). Hence, the 
payload space VFpayioad can be regarded as an Rf (7Tj)-module, 
for every j > k — P, since C Ann(W / P ayioad)- This implies 
that there is no loss of information when a network-coding 
coefficient is stored over R/(iTj) rather than over R. 

The use of headers incurs some overhead. If headers are not 
used, then the last P summands can be used to store payloads, 
leading to additional Ylj=k-P+i ^°^2 \ bits for storing 

payloads. Hence, the normalized redundancy of headers can 
be defined as 

Ef =1 io g2 1^/(^)1 

This quantity is minimized for lattice partitions with (711) = 
• • • = (7Tfe)> which we call uniform lattice partitions. Uniform 
lattice partitions are good candidates for applications in which 
the normalized redundancy of headers is a major concern. We 
note that the lattice partitions in Example [3] and Example H] 
are uniform lattice partitions, while the lattice partitions in 
Example [5] and Example [6] are not uniform lattice partitions 
in general. 

V. Performance Analysis for Lattice Network 
Coding 

In this section, we turn from algebra to geometry, presenting 
an error-probability analysis as well as its implications. 

A. Error Probability for LNC 

According to PropositionQ] the linear function u is decoded 
correctly if and only if 2?a(h) G A'; thus, the error probability 
for the basic setup is given by 

P e (h,a)=Pr[2> A (n)£A / ], 

where n = Y^ =1 {ahi — a^)x^ + az is the effective noise. 
Note that the effective noise n is not necessarily Gaussian, 
making the analysis nontrivial. To alleviate this difficulty, we 
focus on a special case in which the shaping region (Voronoi 
region) V(A') is a (rotated) hypercube in C™, i.e., 

V(A') = 7 UH„ 

where 7 > is a scalar factor, U is any n x n unitary 
matrix, and H n is a unit hypercube in C™ defined by H n = 



([-1/2, 1/2) + i[— 1/2, 1/2))". This corresponds to so-called 
hypercube shaping in ll39l . We note that all of our previous 
examples of lattice partitions admit hypercube shaping. The 
assumption of hypercube shaping not only simplifies the analy- 
sis of error probability, but also has some practical advantages, 
for example, the complexity of the shaping operation is low 
(however, there is no shaping gain ll33l . Il39l ). In the sequel, 
we will provide an approximate upper bound for the error 
probability for LNC schemes that admit hypercube shaping. 
This upper bound is closely related to certain geometrical 
parameters of a lattice partition as defined below. 

The inter-coset distance d(Ai + A', A2 + A') between two 
cosets Ai + A', A 2 + A' of A/ A' is defined as 

d(Ai+A', A 2 +A') = min{||xi-x 2 || : x a e A x +A', x 2 e A 2 +A'}. 

Clearly, d(Ai + A', A 2 + A') = if and only if Aj + A' = 
A 2 + A'. 

The minimum inter-coset distance d(A/A') of A/ A' is thus 
defined as 

ef(A/A') 4 min{d(Ai + A', A 2 + A') : A x + A' ^ A 2 + A'}. 

Let the set difference A\A' = {A e A : A ^ A'}. Then 
d(A/A') corresponds to the length of the shortest vectors in 
the set difference A \ A'. Denote by K(A/A') the number of 
these shortest vectors. 

An element x in a coset A + A' is called a coset leader if 
||x|| < ||y|| for ally € A + A'. 

1 ) Error analysis for the basic setup: We have the follow- 
ing union bound estimate (UBE) of the error probability. 

Theorem 7 (Probability of Decoding Error): Assume hy- 
percube shaping is used for A/ A'. Let u be a predetermined 
linear function. Then the union bound estimate of the proba- 
bility of decoding error is 

P«(h,a) ~ A'(A/A')exp (-J^l^L^ , 

where a £ R L (a ^ 0) is the coefficient vector for u, a G C 
is the scalar, and the parameter Q(a, a) is given by 

Q(a,a) = H 2 +SNR||ah-a|| 2 . (15) 

The proof is given in Appendix iBl 

Theorem [7] has the following important implications. 

1) The scalar a should be chosen such that Q(a, a) is 
minimized; 

2) The lattice partition A/ A' should be designed such that 
K (A/A') is minimized and d(A/A') is maximized. 

These two implications will be discussed fully in Sec. IV-BI 
and Sec. IV-CI Here, we point out that, under hypercube 
shaping, the effective noise n is a random vector with i.i.d. 
components of variance NoQ(a, a). Hence, the first implica- 
tion can be interpreted as a minimum variance criterion. 

2) Error analysis for the extended setup: Once the coeffi- 
cient vectors ai , . . . , a m (for the linear functions Ui , . . . , u m ) 
are chosen by the receiver, the following corollary follows 
immediately from Theorem [7] 
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Corollary 1: Assume hypercube shaping is used for A/A'. 
Then for each linear function u^, the union bound estimate of 
the probability of decoding error is 

P e (h, ai ) « tf(A/A')exp f- .^ A / A ° 

V 4:NoQ(ai,ai 

where a; 6 R L (aj ^ 0) is the coefficient vector for Uj, 
on G C is the scalar for u^. 

Recall that the linear combinations ui, . . . , u m should be 
linearly independent. Thus, Corollary [T] suggests that each 
coefficient vector a; should be chosen such that each Q(pn, a^) 
is as small as possible under the constraint that Ui , . . . , u m 
are linearly independent. This can be regarded as a constrained 
minimum variance criterion, which will be explored next. 

B. Choice of Receiver Parameters 

In the previous section, we derive a minimum variance 
criterion and a constrained minimum variance criterion for 
choosing receiver parameters. In this section, we will apply 
these criteria to develop explicit algorithms for choosing re- 
ceiver parameters. In particular, we will show that 1) choosing 
a single coefficient vector is a shortest vector problem, and 
2) choosing multiple coefficient vectors is related to sphere- 
decoding algorithms and lattice-reduction algorithms. 

1) Choice of the scalar a: We note that the minimum 
variance criterion is equivalent to the maximum computation- 
rate criterion in [14|. Hence, the results in [14| can be carried 
over here directly. 

Proposition 2 ( l[14\l): For a predetermined coefficient vec- 
tor a G R L (a 7^ 0), the optimal scalar a, denoted by a opt , is 
given by 

ah H SNR 

"opt = cmnii,.!!, , ; ■ (16) 



SNRIIhll 



1 



2) Choice of a single coefficient vector: Suppose the re- 
ceiver has the freedom to choose a single coefficient vector. By 
Proposition [2] for any coefficient vector a, the corresponding 
optimal parameter Q(a op t,a) is equal to aMa H , where the 
matrix M is 



M = SNRI L - 



SNR 



SNRIIhll 2 + 1 



h H h. 



Observe that the matrix M is Hermitian and positive-definite. 
Hence, M has a Cholesky decomposition M = LL H , where 
L is a lower triangular matrix. It follows that 

Q(a opt ,a) = aMa H = ||aL|| 2 . 

Thus, finding an optimal coefficient vector a is equivalent to 
solving the shortest vector problem 



aopt = argmin ||aL| 



(17) 



3) Choice of multiple coefficient vectors: Suppose the re- 
ceiver has the freedom to choose m coefficient vectors. Then 
these coefficient vectors a x , . . . , a m should be chosen such 
that each Q(cti, a,) = ||ajL|| 2 is as small as possible under the 
constraint that u x , . . . , u m are linearly independent. We will 
show that, for lattice partitions constructed in Section IIV-DI 



there exists a feasible solution of {ai, . . . ,a m } that simulta- 
neously optimizes each ||ajL||. We call such feasible solutions 
dominated solutions, as defined below. 

Definition 2 (Dominated Solutions): A feasible solution 
ai,...,a m (with ||aiL|| < ... < ||a m L||) is called a 
dominated solution if for any feasible solution a! m 
(with [|a]L|| < . . . < ||a' m L||), the following inequalities hold 



|a 4 L|| < lla'LIL 



1. 



We will show the existence of dominated solutions for lattice 
partitions constructed in Section IIV-DI For ease of presenta- 
tion, we mainly focus on lattice partitions obtained from com- 
plex Construction A here, since similar methods apply to other 
constructions as well. Note that for complex Construction A, 
the linear independence of Ui,...,u m G (R/(Tr)) k implies 
the linear independence of ai,...,a m G (R/(ir)) L , where 
&i is the natural projection of a. The existence of dominated 
solutions is proven in the following theorem. 

Theorem 8: A feasible solution {ai, . . . , a m } defined by 

ai = argmin {|| aL 1 1 | a is nonzero} 

&2 — argmin {|| aL 1 1 | a, ai are linearly independent} 



a m = argmin {|| aL 1 1 | a, ai, . . . , a m _i are linearly independent} 

always exists, and is a dominated solution. 
The proof is given in Appendix [C] 

4) Finding dominated solutions: We now propose a method 
of finding a dominated solution, which consists of three steps. 
In the first step, we construct a ball B(p) = {x G C L | 
Il x ll < p} that contains m lattice points ViL, . . . , v m L such 
that vi , . . . , v m are linearly independent. In the second step, 
we order all lattice points within B(p) based on their lengths, 
producing an ordered set S p with ||viL|| < ||v2L|| < ••• < 
||v|5 |L||. Finally, we find a dominated solution {ai, . . . , a m } 
by using a greedy search algorithm given as Algorithm [TJ 

Algorithm 1 A greedy search algorithm 



Input: An ordered set S p = {viL,V2L, . 
||viL|| < ||v 2 L|| <•••< ||v| Sp |L||. 
Output: An optimal solution {ai, . . . , a m }. 

1. Set ai = vi. Set i = 1 and j = 1. 

2. while i < \Sb\ and j < m do 



,Vi S iL} with 



Set i = i ■ 
if v 4 ,ai, . 

Set j = 
end if 
end while 



-1. 

. . , &j are linearly independent then 

j + 1. Set B.j = v,^ 



The correctness of our proposed method follows immedi- 
ately from Theorem |8] Our proposed method is in the spirit of 
sphere-decoding algorithms, since sphere-decoding algorithms 
also enumerate all lattice points within a ball centered at a 
given vector. The selection of the radius p plays an important 
role here, just as it does for sphere-decoding algorithms. If 
p is too large, then the second step may incur excessive 
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then the set S p contains at 
■ ■ ■ , v m are 



computations. If p is too small, then the first step may 
fail to construct a ball that contains m linearly independent 
vi, . . . , v TO . 

As shown in the following proposition, lattice-reduction 
algorithms may be used to determine an appropriate radius p, 
like the Lenstra-Lenstra-Lovasz (LLL) algorithm that is used 
in sphere decoding. 

Proposition 3: Let {bi, . . . ,b^} be a reduced basis l40l 
for L. If p is set to be ||b 
least m lattice points viL, . . . , v m L such that Vi, 
linearly independent. 

Proof: Let v, = b^L -1 for i = 1, . . . , L. Let V be an 
L x L matrix with as its ith row. Since {bi, . . . ,bi} is 
a reduced basis, it follows that the matrix V is invertible. In 
particular, Vi, . . . , v m are linearly independent for all integers 
m<L. M 

There are many existing lattice-reduction algorithms in the 
literature. Among them, the LLL reduction algorithm is of 
particular importance. Recently, the LLL reduction algorithm 
has been extended from real lattices (Z-lattices) to Z[z]-lattices 
[41 1 . Unfortunately, there exist no LLL reduction algorithms 
for general P-lattices to the best of our knowledge; the design 
of such reduction algorithms is left as future work. 

For the special case when R — and L = 2, a dominated 
solution can be computed very quickly and efficiently by using 
the lattice-reduction algorithm proposed in [42] in the context 
of MIMO communication. 

C. Design of Lattice Partitions 

In Sec. IV- Al we show that the lattice partition A/ A' should 
be designed such that K(A/A') is minimized and d(A/A') is 
maximized. These criteria apply to both the basic setup and 
the extended setup under hypercube shaping. In this section, 
we first introduce a notion of nominal coding gain for an LNC 
scheme, which characterizes the performance improvement 
over the baseline LNC scheme. We then discuss how to design 
lattice partitions with large nominal coding gains. 

1) Nominal coding gain for LNC: Recall that Nazer- 
Gastpar's result for the basic setup can be rewritten as 
P mes = log(SNR/Q(a,a)) when SNR > Q(a,a). Observe 
that SNR/Q(a, a) = P/(N Q(a, a)), where A Q(a,a) is 
the variance of the effective noise n under hypercube shaping. 
These facts suggest defining the signal-to-effective-noise ratio 

SENR = 7^-— T 

and the normalized signal-to-effective-noise ratio 

- SENR _ SNR 
norm ~ 2«- ~ 2*~Q(a,a)' 
where P mes is the actual message rate of an LNC scheme. 

For the Nazer-Gastpar scheme, SENR norm = 1 (0 dB) when 
SNR > Q(a,a). Thus, the value of SENR norm for an LNC 
scheme signifies how far this LNC scheme is operating from 
the Nazer-Gastpar scheme in the high-SNR regime. 

Recall that the UBE for an LNC scheme in the basic setup 
is given by 



for high signal-to-noise ratios. Note that SENR norm 

P/(N Q(a, a)2 R ™), 2 nR ™ = V(A')/V(A), and V(A') 



2 n 



(6P)™ (due to hypercube shaping). Combining these 
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results, we obtain 

P e (h,a) w AT(A/A')exp 



7c (A/A')3SENR no 



where 7 C (A/A') = d 2 (A/A')/V r (A) 1 /™ is the nominal coding 
gain of A/ A'. 

For a baseline lattice partition (i.e., A/A' = Z[i] n /7rZ[i]" 
for some tt 6 the nominal coding gain equals to 1. 

Thus, the nominal coding gain provides a first-order estimate 
of the performance improvement of an LNC scheme over the 
baseline LNC scheme in terms of SENR norm . 

2) Lattice partitions with large nominal coding gains: In 
this section, we illustrate how to design lattice partitions with 
large nominal coding gains. We use complex Construction A as 
a particular example, since similar methods can be applied to 
other constructions as well. Recall that complex Construction 
A produces a lattice partition Ac/A' c from a linear code C. 
To optimize the nominal coding gain 7e(Ac/A c ) for Ac/A' c , 
we first relate 7c(Ac/A£,) to certain parameters of the linear 
code C. 

Let 7r be a prime in Z[z] with \ir\ 2 > 2. To each codeword 
c = (ci + (tt), . . . ,c n + (tt)) £ C, there corresponds a coset 
(ci, . . . ,c„) + irZ[i] n , we denote by (c) a coset leader. It is 
easy to check that (c) is uniquely given by 



(c) = (ci - [ct/Tt] x 7T, . . . ,c„ - [cn/ir] x tt), 



(18) 



where is a rounding operation that sends x e C to 
the closest Gaussian integer in the Euclidean distance. The 
Euclidean weight we{c) of c can then be defined as the 
squared Euclidean norm of (c), that is, we{c) = ||(c)|| 2 . 
Let w™ n (C) be the minimum Euclidean weight of nonzero 
codewords in C, i.e., 

wf n (C) = mm{w E {c) : c ^ 0, c G C}. 

Then we have the following result. 

Proposition 4: Let C be a linear code over (tt) and let 
Ac / A' c be a lattice partition constructed from C using complex 
construction A. Then 



7c (A c /A c ) = 



'(C) 



\ % \2(l-k/n) 



P e (h,a) w X(A/A')exp - 



d 2 (A/A') 
4N Q(a, a) 



The proof is in Appendix |D] 

Proposition H suggests that optimizing the nominal cod- 
ing gain 7 c (Ac/A c ) of Ac/A' e amounts to maximizing the 
minimum Euclidean weight w^ m (C) of C. In the sequel, we 
propose two simple methods for constructing linear codes with 
large wf in (C). 

The first method applies to (terminated) convolutional 
codes. Recall that convolutional codes with large free dis- 
tances can be found through simple computer searches. Thus, 
terminated convolutional codes with large minimum Euclidean 
weights can be found in an analogous way. A concrete example 
of this method will be given in Section IVI-AI The second 
method applies to linear codes over "small" field "L[i)/(Tr). 
Note that the minimum Euclidean weight w^ ln (C) of a linear 
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code C is lower-bounded by its minimum Hamming weight 
w% in (C), i.e., w™ in (C) > w™ in (C). The smaller the field size 
is, the tighter the lower bound would be. Hence, codes with 
large w^ m (C) implies codes with large Wg ln (C). This fact 
can be used to construct good (not necessarily optimal) linear 
codes over small Z[i]/(ir). 

VI. Design Examples and Simulation Results 
A. Design Examples 

In this section, we provide two concrete design examples of 
practical LNC schemes based on complex Construction A and 
lifted Construction D. The purpose of our design examples 
is to demonstrate the potential of LNC schemes in practical 
settings rather than to construct powerful LNC schemes that 
approach the performance of the Nazer-Gastpar scheme. As 
such, all of our design examples feature short packet length 
and reasonable decoding complexity. In particular, we will 
show that, under these practical constraints, a nominal coding 
gain of 3 to 5 dB is easily obtained. (A more elaborate scheme, 
based on signal codes j25l . is described in l26ll .) 

Example 7: Consider a rate- 1/2 terminated (feed-forward) 
convolutional code over Z[z]/(3) with v memory elements. 
Suppose the input sequence u(D) is a polynomial of degree 
less than fi. Then this terminated convolutional code can be 
regarded as a [2(/z+z/), p] linear block code C. Using complex 
Construction A as described in Example [4] we obtain a lattice 
partition Ac /A' c . 

Note that the minimum Euclidean weight Wg ln (C) of C can 
be bounded as 

< n (C)< 3(1 + 2/), 

for all rate- 1/2 terminated (feed-forward) convolutional codes 
over Z[i]/ (3). This upper bound can be verified by considering 
the input sequence u(D) = 1. Hence, the nominal coding gain 
7c(Ac/A c ) satisfies 

7c(A c /A c ) < 1 + v. 

When v = 1,2 and p 3> v, this upper bound can be 
asymptotically achieved by polynomial convolutional encoders 
shown in Table U 



TABLE I 

Polynomial convolutional encoders that asymptotically 
achieve the upper bound. 



V 


S(D) 


7c (a c /a;.) 


1 


[14 


-(l + i)D, {l+i)+D} 


2 (3 dB) 


2 


[1 + D + (1- 


h'i)D' 2 , (1 + i) + (1 -i)D + D' z ] 


3 (4.77 dB) 



Note that when v = 1 or 2, the encoder state space 
size is 9 or 81. Note also that the lattice decoder 2?a c 
can be implemented through a modified Viterbi decoder as 
discussed in Appendix|E] Thus, this example demonstrates that 
a nominal coding gain of 3 to 5 dB can be easily obtained with 
reasonable decoding complexity. ■ 

Our next example is based on lifted Construction D. 

Example 8: Consider nested linear codes Co 2 C\ 2 C 2 of 
length n over Z/ (2), where both Co and C\ are the [n, n] trivial 
code, and C2 is a [n, k 2 , d 2 ] code. Using lifted Construction D 
as described in Example [5] we obtain a lattice partition A/A'. 



Note that the minimum inter-coset distance d(A/A') < 2 
for all linear [n, k%, d 2 ] codes over Z/(2), since (2,0,..., 0) 
is a lattice point in A (but not in A')- Note also that V(A') = 
U(A)4" +fe2 and that V(A') = 4 2n . Hence, the nominal coding 
gain 7 C (A/A') satisfies 

7c(A/A') < 4/4( 1 - fe2 /">. 

It is well known (e.g., E5)) that when d 2 > 4, d(A/A') = 2. 
Thus, the upper bound for the nominal coding gain can be 
achieved by choosing an [n, k2, d 2 ] code with d 2 > 4. Table ITT1 
lists several extended Hamming codes with d = 4 as well as 
the corresponding nominal coding gains (if they are used as 
C 2 ). ^ ■ 

TABLE II 

Several Extended Hamming codes and corresponding nominal 
coding gains. 



n 


k 


7c (A/A') 


32 


26 


3.08 (4.89 dB) 


64 


57 


3.44 (5.36 dB) 


128 


120 


3.67 (5.64 dB) 


256 


247 


3.81 (5.81 dB) 



We note that Ordentlich-Erez's construction in ll43l can be 
regarded as a special case of Example [H] In their construction, 
C 2 is chosen as a rate 5/6 cyclic LDPC code of length 64800. 
Example [8] suggests that their nominal coding gain is upper 
bounded by 4/4 1/6 (5.02 dB). Example [8] also suggests that, 
to further improve the nominal coding gain, C 2 may be chosen 
as a [256, 247] extended Hamming code or Ci may be chosen 
as a non-trivial code. 

B. Simulation Results 

As described in Section Q] there are many potential appli- 
cation scenarios for LNC, the most promising of which may 
involve multicasting from one (or more) sources to multiple 
destinations via a wireless relay network. Since we wish to 
avoid introducing higher-layer issues (e.g., scheduling), in this 
paper, we focus here on a two-transmitter, single receiver 
multiple-access configuration, which may be regarded as a 
building block component of a more complicated and realistic 
network application. In particular, we focus on the following 
three scenarios: 

1) The channel gains are fixed; the receiver chooses a single 
linear function. 

2) The channel gains are Rayleigh faded; the receiver 
chooses a single linear function. 

3) The channel gains are Rayleigh faded; the receiver 
chooses two linear functions. 

In each scenario, we evaluate the performance of four 
LNC schemes, namely, the Nazer-Gastpar scheme, two LNC 
schemes (i^ = 1, 2) proposed in Example [71 and the baseline 
LNC scheme over Z[i]/(3) as defined in Sec. IV-Cl Since we 
are interested in LNC schemes with short packet lengths, each 
transmitted signal consists of 200 complex symbols in our 
simulations. 
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Fig. 3. Error Performance of four LNC schemes in Scenario 1. 

1 ) Scenario 1 (fixed channel gains; single coefficient vec- 
tor): Fig. |3] depicts the frame-error rates of the four LNC 
schemes as a function of SENR norm . Here the channel-gain 
vector h is set to h = [-1.17 + 2.15i 1.25 - 1.63?]; this 
is precisely the same fixed channel-gain vector used in [14| 
which facilitates comparisons. However, as we have shown in 
Sec. lV-Cl the results are not particularly sensitive to the choice 
for h; similar results are achieved for other fixed choices for h. 
For the Nazer-Gastpar scheme, we have SENR norm = 1(0 dB) 
when SNR > Q(a, a), as explained in Sec. IV-CI For the two 
LNC schemes proposed in Example [7] the parameter /j, + v 
is set to 100. Thus, each transmitted signal consists of 200 
complex symbols. For the baseline LNC scheme, the lattice 
partition is set to Z[i] 200 /3Z[i] 200 . From Fig. [3] we observe 
that a nominal coding gain of 3 to 5 dB can be achieved by 
using a (modified) Viterbi decoder with state space of size 9 
or 81. 

2) Scenario 2 (Rayleigh faded channel gains; single coef- 
ficient vector): Fig. |4(a)| shows the frame-error rates of three 
LNC schemes as a function of SNR. For the two LNC schemes 
proposed in Example [7] the parameter /i + v is again set 
to 100 for the same reason. In this case, the corresponding 
message rates are ^ log 2 (3) {v = 1) and ^ log 2 (3) (u = 2), 
respectively. To make a fair comparison, the message rate of 
the Nazer-Gastpar scheme is set to log 2 (3), which is quite 
close to the previous two message rates. The decoding rule for 
the Nazer-Gastpar scheme is as follows: a frame error occurs 
if and only if log 2 (3) > log 2 (SNR/Q(a, a)), where a is the 
single coefficient vector. As seen in Fig. |4(a)| the gap to the 
Nazer-Gastpar scheme is around 5 dB at an error-rate of 1%. 

Fig. |4(b)| shows the frame-error rates of the baseline LNC 
scheme (over Z[i] 200 /3Z[i] 200 ) and the 9-QAM PNC scheme 
described in Example [2] For the 9-QAM scheme, the coeffi- 
cient vector a is set to [1 1] as explained in Example [2] To 
make a fair comparison, the coefficient vector a in the baseline 
LNC scheme satisfies eii ^ 0,a 2 ^ 0, which comes from the 
"exclusive law of network coding" as discussed in 0, JS). 
As seen in Fig. |4(b)| the baseline LNC scheme outperforms 
the 9-QAM scheme by more than 6 dB at an error-rate of 
1%. In other words, even the baseline LNC scheme is able 
to effectively mitigate phase misalignment due to Rayleigh 
fading. Finally, note that Fig. |4(a)| and Fig. |4(b)| are separated 




14 16 18 20 22 24 
SNR [dB] 

(a) 




30 35 40 45 

SNR [dB] 

(b) 



Fig. 4. Error Performance of various LNC schemes in Scenario 2. 



10 1 













Nazer-Gastpar. 1st 




-e-Rate-1/2 (v = 2). 1st 




—i— Rate-1/2 (v = 1). 1st 




Nazer-Gastpar. 2nd 




-e-Rate-1/2 (v = 2). 2nd 




-+ -Rate-1/2 (v = 1).2nd 



20 25 30 35 40 

SNR [dB] 



Fig. 5. Error Performance of three LNC schemes in Scenario 3. 



because they have different message rates (log 2 (3) in Fig. |4(a)| 
and log 2 (3) in Fig. [4(b)}. 

3) Scenario 3 (Rayleigh faded channel gains; two coeffi- 
cient vectors): Fig. [5] depicts the frame-error rates of three 
LNC schemes as a function of SNR. Here the two coefficient 
vectors are chosen by using the lattice-reduction algorithm 
proposed in |42|. The configurations for the three LNC 
schemes are precisely the same as those in Fig. |4(a)| The 
frame-error rates for the first linear combination are depicted 
in solid lines, while the error rates for the second linear 
combination are depicted in dashed lines. From Fig. [5] we 
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observe similar trends of error rates as in Fig. |4(a)| We also 
observe that the first linear combination is much more reliable 
than the second one. 

VII. Conclusion 

In this paper, the problem of constructing LNC schemes via 
practical, finite-dimensional, lattice partitions has been studied. 
A generic LNC scheme has been defined based on an arbitrary 
lattice partition. The message space of the generic scheme 
(in which random linear network coding is implemented) is 
isomorphic (as a module) to the underlying lattice partition, 
whose structure may be analyzed using the Smith normal 
form theorem. These results not only give rise to a convenient 
characterization of the message space of the Nazer-Gastpar 
scheme, but also lead to several generalized constructions 
of LNC schemes as well. All of these constructions are 
compatible with header-based random linear network coding, 
and the general approach is compatible with a wide variety of 
lattice-partition constructions going beyond Construction A. 

A union bound estimate of the error probability for 
hypercube-shaped LNC schemes has been derived, showing 
that 1) the received parameters {ct£,&i} should be chosen 
such that each Q(ai,a.t) is minimized, and 2) the lattice 
partition A/A' should be designed such that d(A/A') is 
maximized and M (A/A') is minimized. These criteria lead 
to explicit algorithms for choosing the receiver parameters, 
which are connected to some well-studied lattice problems, 
such as the shortest vector problem and the lattice reduction 
problem. These criteria also lead to several specific methods 
for optimizing lattice partitions. In particular, the nominal 
coding gain for lattice partitions has been introduced, which 
serves as an important figure of merit for comparing various 
LNC schemes. Finally, several concrete examples of practical 
LNC schemes have been provided, showing that a nominal 
coding gain of 3 to 5 dB is easily obtained under reasonable 
decoding complexity and short packet length. 

We believe that there is still much work to be done in this 
area. One direction for follow-up work would be the design 
and analysis of higher-layer scheduling algorithms for LNC 
schemes. Another direction would be the study of more general 
shaping methods beyond hypercube shaping. A third one 
would be the construction of more powerful LNC schemes. 
We believe that our algebraic framework can serve as a good 
basis for such development. 

Appendix 

A. Proof of Relation ( 1741) for Example \5\ 

The following two observations simplify the proof of the 
relation (TBI) . First, it suffices to consider the case of a — 2, 
since the case of a > 2 is essentially the same. Second, it 
suffices to prove the relation for the Z-lattice partition A/ A', 
i.e., 



(19) 



G A , = diag(;v^p, p ^ 

fel — fea &2 

due to the lift operation. 

Next we construct two generator matrices Ga and Ga' 
satisfying the above relation. 



First, let g^ denote <x(gj), for i — l,...,n. It is 
easy to see a basis of A is given by the vectors 
gi,---,gfc 2 , Pgfca+ii---,Pgfci. P lus n - ki vectors of the 
shape (0, . . . , 0,p 2 , 0, . . . , 0). Moreover, these basis vectors 
have the following property: A vector v has a leading position 



i if Vj = 0, for j = 1, . 



1. Then these basis vectors 



have distinct leading positions. A generator matrix Ga can be 
constructed by using these basis vectors as rows. 

Second, we claim that a basis of A' is given by 
p 2 gi, . . . ,p 2 gk! plus the same n — k\ vectors of the shape 
(0, . . . , 0,p 2 , 0, . . . , 0) as those for A. This is because these 
vectors have distinct leading positions and the elements in the 
leading positions are equal to p 2 . Similarly, a generator matrix 
Ga' can be constructed by using these basis vectors as rows. 

By comparing these two bases for A and A', we conclude 
that there indeed exist two generator matrices Ga and G A ' 
satisfying Relation ([T9l i. completing the proof. 

B. Proof of Theorem 

First, we upper bound the error probability Pr[2? A (n) £ A']. 
Consider the (non-lattice) set {A \ A'} U {0}, i.e., the set 
difference A\ A' adjoined with the zero vector. Let 1Zv(0) be 
the Voronoi region of in the set {A \ A'} U {0}, i.e., 

K v (0) = {x e C" : ||x-0|| < ||x- A||, VA e A \ A'} . 

We have the following upper bound for Pr[Z? A (n) ^ A']. 
Lemma 1: Pr[P A (n) </ A'] < Pr[n £ TZ v {0)]. 
Proof: 

Pr[n € U v {0)} = Pr[||n - 0|| < ||n — A||, VA e A \ A'] 
= Pr[||n-0|| < ||n- A||, VA e A \ A']. 

Note that if ||n - 0|| < ||n - A|| for all A € A \ A', then 
2? A (n) </ A \ A', as is closer to n than any element in 
A \ A'. Thus, 

Pr[n 6 Tl v (0)] < Pr[D A (n) g A \ A'] = Pr[2? A (n) € A']. 



We further upper bound the probability Pr[n ^ 7^y(0)]. 
Let Nbr(A \ A') C A \ A' denote the set of neighbors of in 
A \ A', i.e., Nbr(A \ A') is the smallest subset of A \ A' such 
that lZy(0) is given by 



TZ v (0) = {xeC 
Then we have 



|x - 1| < ||x - A||, VA e Nbr(A \ A')} . 



P[n g TZ v (0)} 
= P [||n|| 2 > ||n - A|| 2 , some A e Nbr(A \ A')] 

= P [Re{A H n} > ||A|| 2 /2, some A G Nbr(A \ A') 

< ^[Re{A H n}>||A|| 2 /2 

AeNbr(A\A') 

< exp(-i/||A||72)£; [exp(^Re{A H n}) 

A6Nbr(A\A') 



(20) 

W > 
(21) 
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where (f20l > follows from the union bound and ( |2TI ) follows 
from the Chernoff bound. From (|8), we have 



E 



--E 



exp(i/Re{A H n}) 

exp(j/Re{A H ^^(ah( — a^)x^ + azj }) 

£ [exp(^Re{A H az})j 
Y[E [exp(^Re{A H (a^ - a<)x*}) 



:exp(^ 2 ||A|| 2 H 2 /yo) 



J^P [exp(^Re{A H (a^ - a^)x £ }) 



(22) 



(23) 



where d22t follows from the independence of Xi,...,Xz,,z 
and (l23l follows from the moment-generating function of a 
circularly symmetric complex Gaussian random vector. 

Lemma 2: Let x G C™ be a complex random vector 
uniformly distributed over a hypercube jVHn for some 7 > 
and some n x n unitary matrix. Then 

E [exp(Re{v H x})] < exp(||v|| 2 7 2 /24). 



Proof: First, we consider a special case where the unitary 
matrix U = I„. In this case, we have 



E [exp(Re{v H x})] 

=E 



=E 



exp(Re{v} T Re{x} + Im{v} T Im{x})] 

n 

exp(^ (Re{vi}Re{xi} + Im{v !; }Im{xi})) 



: J] E [cxp(Re{v l }Re{x 4 }] E [explm{v,}lm{x,})] (24) 



n 



sinh(Re{vi}7/2) sinh(Im{v;}7/2) 
\ Re{v. i } 7 /2 Im{ Vi }7/2 

<nex P r^:: }7 Hex P ^ Im{v - h)2 



1=1 



V 24 



24 



(25) 
(26) 



-xi»||-]]v|| 2 



where d24l) follows from the independence among each 
real/imaginary component, d25l l follows from the moment- 
generating function of a uniform random variable (note that 
both Re{xi} and Im{xi} are uniformly distributed over 
[—7/2,7/2]), and (|26T > follows from sinh(a;)/a; < exp(a; 2 /6) 
(which can be obtained by simple Taylor expansion). 

Then we consider a general unitary matrix U. In this 
case, we have x = Ux', where x' G j[— 1/2, l/2] 2n , 
i.e., both Re{x^} and Im{x'} are uniformly distributed over 



[-7/2,7/2]. Hence, 

E [exp(Re{v H x})] = E [exp(Re{v H Ux'})] 

= E [exp(Re{(U H v) H x'})] 



H,,l|2 



<exp( ^-||U M v 
<-M>l^||v|| 2 



Note that P = ±E[\\x e \\ 2 } = 7 2 /6. Thus, we have 
E exp(>Re{A H n})] 

<exp(^ 2 ||A|| 2 |a| 2 iVo)[] C xp(||^A(a^- a ,)|| 2 P/4) 

i 

= exp(^ 2 ||A|| 2 |a| 2 iVo + ||^A|| 2 ||ah - a|| 2 P/4) 
= cxp(i||A||ViV Q(a,a)), 
where the quantity Q(a, a) is given by 

Q(a,a) = |a| 2 + SNR|]ah - a|| 2 

and SNR = P/N . 

It follows that, for all v > 0, 

Pr[n g'fty(O)] 

< Yl expf-H|A|| 2 /2 + i||A||ViV Q(a,a) 

AGNbr(A\A') ^ 

Choosing v = l/(N n Q(a,a)), we have 
Pr[n &K V (0)] < ex P(" 

AeNbr(A\A') 

For high signal-to-noise ratios, we have 
HAH 2 



4N Q{a,a) 



Y ex p(- 

AGNbr(A\A') 



4N Q(a, a) 

Therefore, we have 

Pr[X> A (n) i A'] < Pr[n £ K v (0) 

w if(A/A')exp 

completing the proof of Theorem [7] 



) «if(A/A')exp 



d 2 (A/A') 
4NoQ(a, a) 



d 2 (A/A') 
AN a Q{a,a) 



C. Proof of Theorem \E\ 

First, we show the existence of the solution {ai, . . . , a TO } 
by induction on m. 

If m = 1, then the vector ai can be chosen such that aiL is 
one of the shortest lattice points. Note that ai is not divisible 
by 7r; otherwise it will not be one of the shortest lattice points. 
In other words, ai is indeed nonzero. Hence, the solution ai 
always exists when m = 1. 

Now suppose the solution {ai , . . . , a^ } exists when k < m. 
We will show the existence of the vector a^+i. 

Consider the following set 

B = {b G R L : b, ai, . . . , a.fc are linearly independent}. 
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Clearly, the set B is nonempty, since k < m. Choose an 
element b from the set B and construct a new set S as 

5 = {aei? L : ||aL|| < ||bL||, 

a, ai, . . . , a.k are linearly independent}. 

Clearly, S is a nonempty set of finite elements. Then the vector 
afc+i can be chosen as 

a fc+ i = argmin ||aL||. 

This proves the existence of the vector afc+i, which completes 
the induction. 

Second, we show that the solution {a 1; . . . , a m } is a dom- 
inated solution by induction on m. 

If m = 1, then ||aiL|| < ||biL|| for any feasible solution 
bi, since aiL is one of the shortest lattice points. 

Now suppose that {ai,...,afe} is a dominated solution 
when k < m. We will show that {ai, . . . ,a&, a^+i} is also a 
dominated solution. 

Consider a feasible solution {bi, . . . , bfc,bfc+i} with 
|[biL|| < ... < ||bfe +1 L||. Since b 1 ,...,bj. are linearly 
independent, we have 

||a<L|| < [|b*L||, i = l,...,k. 

It remains to show ||afc+iL|| < ||bfc + iL||. We consider the 
following two cases. 

1) If there exists some b^ (i = 1, . . . , k + 1) such that 
bj , ai , . . . , &k are linearly independent, then by the 
construction of a^+x, we have 

||a*+iL|| < ||biL|| < ||b fc+ iL||. 

2) Otherwise, each hi can be expressed as a linear combi- 
nation of ai, . . . , afc. That is, 

bi G Span{ai, . . . , a k }, Vt = 1, . . . , k + 1. 

This is contrary to the fact that bi, . . . , hk.+i are linearly 
independent, since any k + 1 vectors in a vector space 
of dimension k are linearly dependent. 
Therefore, we have ||afe+iL|| < ||bfc+iL||, which completes 
the induction. 

D. Proof of Proposition |4] 

Note that the nominal coding gain 7 c (Ac/A c ) is invariant 
to scaling. Hence, we may assume, without loss of generality, 
that the lattice partition Ac/A' c is used instead of its scaled 
version. 

First, we will show that 

d 2 (A c /A c )=< in (C). (27) 

Recall that d(Ac/A' c ) is the length of the shortest vectors in 
the set difference Ac\A' c . Hence, we have 

d(Ac/A c )=rrdn||(c>||. 

c^O 

It follows that d 2 (A c /A' c ) = min c#0 ||(c}|| 2 = wf n (C). 
Second, we will show that 

V(A) = |7r| 2 ("- fc >. (28) 



Note that V(A') = |tt| 2 " and V{A')/V{A) = \n\ 2k . Hence, 
we have V(A) = |vr| 2 ("- fc ). 

Combining (|27T > and d28l . we have 7 c (Ae/A c ) = 
w B in (C)/k| 2(1 ~ fc/ ™ ) , which completes the proof. 

E. Modified Viterbi Decoder for Example^ 

We will show that the NLP decoder T>\ c can be imple- 
mented through a modified Viterbi decoder. 

First, note that the NLP decoder 2?a c solves the following 
optimization problem 

minimize ||A — ay|| (29) 
subject to A £ Ac 

Second, note that the problem d29l ) is equivalent to 

minimize ||(c) + A — ay|| (30) 
subject to c G C 
X'eA' c 

This is because each lattice point A G Ac can be decomposed 
as A = (c) + A', where c = er(A) and A' G A' c . 
Third, note that Problem d30b is equivalent to 

minimize ||[(c) — ay] mod A c || (31) 
subject to c G C 

where [x] mod A' c is defined as [x] mod A' c = x — T)^ (x). 
This is because A' = — 2?a' (( c ) — ay) solves Problem (|30T > 
for any c G C. 

Now it is easy to see the problem d3Tb can be solved 
through a modified Viterbi decoder with the metric given by 
|| [•] mod A' c \\ instead of || • ||. Therefore, the NLP decoder T>a c 
can be implemented through a modified Viterbi decoder. 
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